ZS
Product
zstd-jni
9
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 1Low 0
Watch
Add zstd-jni to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-90560 | 8.2 | Sep 12 | zstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictDecompress Affected: 1.2.0 before 1.5.7-14 |
| CVE-2026-89046 | 8.2 | Sep 10 | zstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative Offset Affected: 1.5.5-6 before 1.5.7-14 |
| CVE-2026-87823 | 8.2 | Sep 9 | zstd-jni 1.1.1 through 1.5.7-13 Out-of-Bounds Read via Direct ByteBuffer Frame-Size Methods Affected: 1.1.1 before 1.5.7-14 |
| CVE-2026-87795 | 8.2 | Sep 9 | zstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictCompress Affected: 1.2.0 before 1.5.7-14 |
| CVE-2026-87877 | 7.7 | Sep 9 | zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free via Setters Called After close() Affected: 1.3.8-4 before 1.5.7-14 |
| CVE-2026-87825 | 7.7 | Sep 9 | zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free of Compression and Decompression Dictionaries Affected: 1.3.8-4 before 1.5.7-14 |
| CVE-2026-87824 | 7.5 | Sep 9 | zstd-jni 1.3.3-1 through 1.5.7-13 Out-of-Bounds Read via Zstd.trainFromBufferDirect Affected: 1.3.3-1 before 1.5.7-14 |
| CVE-2026-90852 | 7.3 | Sep 15 | luben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after free Affected: 1.5.7-13 |
| CVE-2026-89045 | 4.0 | Sep 10 | zstd-jni 1.4.8-4 through 1.5.7-13 Denial of Service via Negative Length Affected: 1.4.8-4 before 1.5.7-14 |
Showing 9
